Governed MCP for real infrastructure actions — gated, approved, audited.
Emisar MCP server exists for a simple reason — assistants are far more useful when they can act on Emisar directly instead of describing what you should do. Governed MCP for real infrastructure actions — gated, approved, audited.
emisar gives MCP-capable agents a catalog of declared infrastructure actions instead of a shell. Policy decides what runs, what waits for a person, and what is denied. A small outbound-only runner checks the action again on the host before it executes anything.
Once Emisar is connected, these are the calls the assistant has available:
Content — addressed packs.** The control plane pins the trusted pack hash; theHost — side enforcement.** The runner clamps execution options to the pack'sGoal — Start hereYou will need 2 environment variables: EMISAR_ENROLLMENT_KEY, EMISAR_URL. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
Being a remote server, there is no local install. You register the endpoint with your client, authorise it once, and the tools appear.
Among the cloud and infrastructure options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Emisar's toolset — Content, Host, Goal — is a fair guide to whether it matches your workflow. It is maintained by dev.emisar; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| Content | addressed packs.** The control plane pins the trusted pack hash; the |
| Host | side enforcement.** The runner clamps execution options to the pack's |
| Goal | Start here |
| Variable | Description | Required |
|---|---|---|
| EMISAR_ENROLLMENT_KEY | Credential the server authenticates with. | Yes |
| EMISAR_URL | Endpoint or connection string the server talks to. | Yes |
Manage your whole Supabase project in conversation — database, auth, storage, Edge Functions and branches.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.